Docket No. 0579-1097 



AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior 
versions, and listings of claims in the application: 

LISTING OF CLAIMS : 

1. (currently amended) A method Method of making 
secure the execution of a computer program (EXE) in a computing 
device comprising a microprocessor, the computer program 

including a set of instructions comprising — at least efte 

instruction a plurality of instructions , which method — i& 
characterized in that it includes comprises : 

said microprocessor executing: 

- a first step (E30), prior to the execution of the 
computer program, of calculating and storing a first signature 
(SIG1) representative of the intended execution of the set of 
instructions, 

- a second step (E50), during the execution of the set 
of instructions, of calculating and storing a second signature 
(SIG2) representative of the execution of the set of 
instructions, and 

- a step (E60) of detecting an anomaly in the execution 
of the set of instructions on the basis of the first signature 
(SIG1) and the second signature (SIG2), 
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wherein said set of instructions comprising comprises 
at least one critical instruction in the form of a jump 
instruction of any type (JMP, JNZ, CJNE, JZ) within the sequence 
of instructions inside of said set of instructions. 

2. (currently amended) The method Method according to 
claim 1, wherein characterized in that the first calculation and 
storage step (E30) is executed during the generation of the 
instructions (Al, A13) of the computer program. 

3. (currently amended) The method Method according to 
claim 1, — characterized — in — that wherein the second signature 
(SIG2) stored during the second calculation and storage step 
(E50) is retained in memory during the execution of at least one 
second instruction following the set of instructions. 

4. (currently amended) The method Method according to 
claim 1, characterized in that wherein : 

- the first signature (SIG1) is obtained from the 
number of instructions in the set of instructions, 

- the second signature (SIG2) is obtained from the 
number of instructions from the set of instructions that have 
been executed, and in that 
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- the detection step (E60) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

5. (currently amended) The method Method according to 
claim 1, characterized in that wherein : 

- the first signature (SIG1) is obtained from the 
number of instructions in the set of instructions, 

- the second signature (SIG2) is obtained from the 
number of instructions from the set of instructions that have not 
been executed, this second signature (SIG2) being calculated from 
the first signature (SIG1), and in that 

- the detection step (E60) detects an execution anomaly 
when the value of the second signature (SIG2) is not zero after 
the execution of the set of instructions. 

6. (currently amended) The method Method according to 
claim 5, characterized — i« — that — wherein an interrupt of the 
computer program is triggered when the value of the second 
signature (SIG2) is below a predetermined threshold. 

7. (currently amended) The method Method according to 
claim 5, characterized in that wherein the first signature (SIG1) 
and the second signature (SIG2) are retained in memory during the 
execution of the program in the same register (REG1). 
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8. (currently amended) The method Method according to 
claim 1, characterized in that wherein : 

- the first signature (SIG1) is obtained from the code 
of a critical instruction of the set of instructions, 

- the second signature is obtained from the code of the 
critical instruction, that code being stored at the same time as 
or after the execution of the critical instruction, and in that 

- the detection step (E60) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

9. (currently amended) The method Method according to 
claim 1, characterized in that wherein : 

- the first signature (SIG1) is obtained from the 
address of a critical instruction of the set of instructions, the 
address being obtained during or after the generation of the 
executable code of the set of instructions, 

- the second signature (SIG2) is obtained from the 
address of the critical instruction, that address being stored 
(E30) at the same time as or after the execution (E30) of the 
critical instruction, and 

- the detection step (E60) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 
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10. (cancelled) 

11. (currently amended) The method Method according to 
claim 1, characterized in that wherein : 

- the first signature (SIG1) and the second signature 
(SIG2) are error detector codes (CRC1, CRC2) calculated from the 
code or from an address of an instruction of the set of 
instructions, and in that 

- the detection step (E60) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

12. (currently amended) The method Method according to 
claim 11, characterized in that wherein the error detector codes 
(CRC1, CRC2) are cyclic redundancy check codes. 

13. (currently amended) The method Method according to 
claim 11, characterized in that wherein the error detector codes 
are obtained by the logical combination (XOR) of the code or an 
address of at least one instruction of the set of instructions. 

14. (currently amended) The method Method according to 
claim 1, characterized in that wherein : 
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- the first signature (SIG1) and the second signature 
(SIG2) are respectively obtained during the generation and the 
execution of the instructions from at least two elements chosen 
from: 

. the number of instructions in the set of 
instructions, 

. the code of at least one instruction of the set of 
instructions, 

. the address of at least one instruction of the set of 
instructions, and 

. an error detector code calculated from the code or an 
address of at least one critical instruction of the set of 
instructions, the address being obtained during or after the 
generation of the executable code of the set of instructions, and 
in that 

- the detection step (E6 0) detects an execution anomaly 
when the first signature (SIG1) and the second signature (SIG2) 
are different after the execution of the set of instructions. 

15. (currently amended) The method Method according to 
claim 1, characterized in that wherein it includes a step (E70) 
of destroying at least a portion of the system on which the 
computer program is executed, this step of destroying being made 
when an execution anomaly is detected in the detection step. 
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16. (currently amended) The method Method according to 
claim 1, characterized in that wherein the first signature (SIG1) 
is generated automatically (E30) . 

17. (currently amended) A computing device comprising 
a microprocessor Device — for processing a computer program 
including a set of — a-fe — lcaot — efte — instruction instructions , 
characterized in that it includes 

said microprocessor executes said computer program 
comprising: 

a means (12) for calculating and storing a first 

signature (SIG1), the first signature (SIG1) stored in a memory 
and the first signature (SIG1) is representative of the intended 
execution of the set of instructions prior to the execution 
thereof, said set of instructions comprising at least one 
critical instruction in the form of a jump instruction of any 
type (JMP, JNZ, CJNE, JZ) inside within — fe*e — sequence — ef- 
inotructiono of said set of instructions. 

18. (currently amended) The computing device Device 
according to claim 17, characterized in that wherein the means 
(12) for calculating and storing the first signature (SIG1) are 
adapted to calculate and store information obtained from the 
number of instructions of the set of instructions. 
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19. (currently amended) The computing device Device 
according to claim 17, characterized in that wherein the means 
(12) for calculating and storing the first signature (SIG1) are 
adapted to obtain and store information obtained from the code of 
a critical instruction of the set of instructions. 

20. (currently amended) The computing device Device 
according to claim 17, characterized in that it further includes 
further comprising: 

means (14) for generating executable code from the 
computer program (SOURCE) . 

21. (currently amended) The computing device DovicG 
according to claim 20, characterized in that wherein the means 
for calculating and storing the first signature (SIG1) are 
adapted to obtain and store information obtained from the address 
of a critical instruction, the information being obtained of the 
set of instructions by the means (14) for generating executable 
code . 

22. (cancelled) 
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23. (currently amended) The computing device Device 
according to claim 17, characterized in that wherein the means 
(12) for calculating and storing the first signature (SIG1) are 
adapted to calculate and store information obtained from an error 
detector code (CRC1) calculated from the code or an address of at 
least one instruction of the set of instructions. 

24. (currently amended) The computing device Device 
according to claim 23, characterized in that wherein the error 
detector code (CRC1) is a cyclic redundancy check code. 

25. (currently amended) The computing device Dovioo 
according to claim 23, characterized in that wherein the error 
detector code is obtained by a logical combination (XOR) of the 
code or an address of at least one instruction of the set of 
instructions . 

26. (currently amended) A computing device comprising 
a microprocessor Device — for making secure the execution of a 
computer program including a set of instructions comprising at 
least one instruction a plurality of instructions , which device 
is characterized in that it includes comprises : 

- a first register (REG1) for storing a first signature 
(SIG1) representative of the intended execution of the set of 
instructions, 
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- means (22) for calculating and storing in said first 
register (REG1) or in a second storage register (REG2) during the 
execution of the set of instructions a second signature (SIG2) 
representative of the execution of the set of instructions, and 

- means (24) for detecting an anomaly in the execution 
of the set of instructions on the basis of the first signature 
(SIG1) and the second signature (SIG2), 

said set of instructions comprising at least one 
critical instruction in the form of a jump instruction of any 
type (JMP, JNZ, CJNE, JZ) within the sequence of instructions 
inside of said set of instructions. 

27. (currently amended) The computing device Device 
according to claim 26, characterized — ±& — that — wherein the 
calculation and storage means are adapted to retain the second 
signature (SIG2) in the second register (REG2) during the 
execution of at least one second instruction following the set of 
instructions . 
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28. (currently amended) The computing device Device 
according to claim 26, characterized in that wherein , the first 
signature (SIG1) being obtained from the number of instructions 
of the set of instructions, the second signature (SIG2) 
calculated and stored by the calculation and storage means (22) 
is obtained from the number of instructions of the set of 
instructions that have been executed and in that the detection 
means (24) detect an execution anomaly when the first signature 
(SIG1) and the second signature (SIG2) are different after the 
execution of the set of instructions. 

29. (currently amended) The computing device Dovico 
according to claim 26, characterized in that wherein , the first 
signature (SIG1) being obtained from the number of instructions 
of the set of instructions, the second signature (SIG2) 
calculated and stored by the calculation and storage means (22) 
is obtained from the number of instructions of the set of 
instructions that have not been executed, this second signature 
(SIG2) being calculated from the first signature (SIG1), and tfee 
in that detection means (24) detect an execution anomaly when the 
value of second signature (SIG2) is not zero after the execution 
of the set of instructions. 
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30. (currently amended) The computing device Device 
according to claim 29, characterized in that wherein it further 
includes means for triggering an interrupt of the computer 
program when the value of the second signature (SIG2) is below a 
predetermined threshold. 

31. (cancelled) 

32. (currently amended) The computing device Device 
according to claim 26, characterized in that wherein , the first 
signature (SIG1) being obtained from the code of a critical 
instruction of the set of instructions, the second signature 
(SIG2) calculated and stored by the calculation and storage means 
(22) is obtained from the code of the critical instruction, the 
code being stored at the same time as or after the execution of 
the critical instruction, and in that the detection means (24) 
detect an execution anomaly when the first signature (SIG1) and 
the second signature (SIG2) are different after the execution of 
the set of instructions. 
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33. (currently amended) The computing device Device 
according to claim 26, characterized in that wherein , the first 
signature (SIG1) being obtained from the address of a critical 
instruction of the set of instructions, the second signature 
(SIG2) calculated and stored by the calculation and storage means 
(22) is obtained from the address of the critical instruction, 
that address being stored at the same time as or after the 
execution of the critical instruction, and in that the detection 
means detect an execution anomaly when the first and second 
signatures are different after the execution of the set of 
instructions . 

34. (cancelled) 

35. (currently amended) The computing device Device 
according to claim 26, characterized in that wherein , the first 
signature (SIG1) and the second signature (SIG2) being error 
detector codes (CRC1, CRC2) calculated from the code of an 
instruction of the set of instructions, the detection means (24) 
detect an execution anomaly when the first signature (SIG1) and 
the second signature (SIG2) are different after the execution of 
the set of instructions. 
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36. (currently amended) The computing device Device 
according to claim 35, characterized in that wherein the error 
detector codes (CRC1, CRC2) are cyclic redundancy check codes. 

37. (currently amended) The computing device Device 
according to claim 35, characterized in that wherein the error 
detector codes are obtained by a logical combination (XOR) of the 
code or an address of at least one instruction of the set of 
instructions . 

38. (currently amended) The computing device Device 
according to claim 26, characterized in that wherein , the first 
signature (SIG1) being obtained from at least two elements chosen 
from: 

- the number of instructions of the set of 
instructions, 

- the code of at least one instruction of the set of 
instructions, 

- the address of at least one instruction of the set of 
instructions, and 

- an error detector code calculated from the code or 
the address of at least one instruction of the set of 
instructions, 
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the second signature (SIG2) calculated and stored by 
the calculation and storage means (22) is obtained in a similar 
manner from the at least two elements during the execution of the 
instructions and in that the detection means (24) detect an 
execution anomaly when the first signature (SIG1) and the second 
signature (SIG2) are different after the execution of the set of 
instructions . 

39. (currently amended) The computing device Device 
according to claim 26, characterized in that wherein it further 
includes means for destroying at least a portion of the computer 
program . 

40. (currently amended) A microcircuit Microcircuit 
card characterized in that it includes a securing device (100) 
according to claim 26. 
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